Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.11
  3. Administration
  4. Windows 10 Planning and Deployment Guide
  5. Enrolling Windows 10 devices with BlackBerry UEM
  6. Enrolling a device to be managed with BlackBerry UEM
  7. Install a certificate to activate a Windows 10 device with Windows Autopilot

Install a certificate to activate a 
Windows 10
 device with 
Windows Autopilot

Before you activate a 
Windows 10
 device with 
Windows Autopilot
, a 
BlackBerry UEM
 certificate must be installed on the device. The 
UEM
 certificate must be installed before you complete the initial 
Windows 10
 out-of-the-box setup. After the certificate is installed, the device is automatically enrolled with 
UEM
 during the 
Windows 10
 out-of-the-box setup. 
  • Verify that you have the 
    UEM
     certificate .cer file for 
    Windows 10
     device activation. You can download it using the certificate server URL, which can be found in the default activation email template from the %RsaRootCaCertUrl% default variable. Alternatively, you can transfer the certificate from another device (for example, a USB key).
  • If necessary, reset the 
    Windows 10
     device to the default factory settings. The initial out-of-the-box setup must not be completed on the device yet.
  1. Turn on the 
    Windows 10
     device to load the device out-of-the-box setup.
  2. Connect to a 
    Wi-Fi
     network with an internet connection.
  3. On the keyboard, press 
    CTRL + SHIFT + F3
     or 
    CTRL+Fn+SHIFT+F3
    . The device restarts and enters audit mode.
  4. Download the certificate (.cer file) onto the computer using one of the following methods:
    • Enter the certificate server URL in a web browser. 
    • Transfer the file from a USB key.
  5. Open the .cer certificate file.
  6. Click 
    Install Certificate
    .
  7. Select 
    Local Machine
     and click 
    Next
    .
  8. Select 
    Place all certificates in the following store
     and click 
    Browse
    .
  9. Select 
    Trusted Root Certification Authorities
     and click 
    OK
    .
  10. In the 
    System Preparation Tool
     dialog, do the following:
    1. In the 
      System Cleanup Action
       field, select 
      Enter System Out-of-Box Experience (OOBE)
       and deselect 
      Generalize
      .
    2. In the 
      Shutdown Options
       field, select 
      Reboot
      .
  11. Click 
    OK
    .
    The device restarts and returns to the initial 
    Windows 10
     out-of-box experience setup.
  12. Select your region.
  13. Connect to a 
    Wi-Fi
     network with an internet connection.
  14. Read and accept the 
    Windows 10
     licence agreement.
  15. Enter your work email address.
  16. Enter the password for your work email address.
  17. Read and accept the terms of use.
  18. Choose and accept the privacy settings for your device.
  19. When you are prompted to log in to 
    Windows
    , use the same password as your work email address.
  20. When you are prompted to set up a PIN, type and confirm your PIN.
Verify that you are connected to your organization from the 
Settings > Accounts > Access work or school
 menu.